In the Linux kernel, the following vulnerability has been resolved:
xen-netfront: Add missing skb_mark_for_recycle
Notice that skb_mark_for_recycle() is introduced later than fixes tag in commit 6a5bcd84e886 ("page_pool: Allow drivers to hint on SKB recycling").
It is believed that fixes tag were missing a call to page_pool_release_page() between v5.9 to v5.14, after which is should have used skb_mark_for_recycle(). Since v6.6 the call page_pool_release_page() were removed (in commit 535b9c61bdef ("net: page_pool: hide page_pool_release_page()") and remaining callers converted (in commit 6bfef2ec0172 ("Merge branch 'net-page_pool-remove-page_pool_release_page'")).
This leak became visible in v6.8 via commit dba1b8a7ab68 ("mm/page_pool: catch page_pool memory leaks").
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade rtlaUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade perf | Nov 4, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools | Apr 10, 2025 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-static | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2024 | May 8, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 27, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade libperf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade rtla | Jul 16, 2024 | May 14, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-appleUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-armUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-develUpgrade gfs2-kmp-rt | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-awsUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1063-oracle | Jul 16, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub